@cogenta/schema 0.2.0 → 0.4.1

package/dist/routing/not-found-log.d.ts

@@ -0,0 +1,78 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * The log of public URLs that answered a 404 (fiche 12 task 1).
+ *
+ * Half the point of a redirect table is knowing what to put in it, and
+ * without this a CMS only learns of a broken link when a visitor or a client
+ * complains. This is that missing half — but it is written by an anonymous
+ * request, on every path nobody asked for, which makes it the one part of
+ * this fiche that is a real attack surface rather than a convenience:
+ *
+ * - **One row per path, never one per request.** A second 404 at a path
+ *   already tracked increments a counter; it never appends a row. Without
+ *   this, a scanner requesting the same missing URL in a loop alone would
+ *   grow the table without bound.
+ * - **`maxPaths` is a hard cap on distinct paths.** Once it is reached, a
+ *   404 at a genuinely new path is not recorded at all — existing paths keep
+ *   accumulating hits, but the table cannot grow past its cap. A scanner
+ *   that requests thousands of unique URLs a minute (the case one row per
+ *   path alone does not defend against) hits this instead of a full disk.
+ * - **`purge` drops what has not been seen in `retainDays`.** Old noise does
+ *   not sit forever, and it is what frees capacity back up under the cap.
+ * - **No personal data, ever.** Neither an IP address nor a user agent is a
+ *   column here, full or truncated — `AGENTS.md` § Logs forbids storing
+ *   either, and the path plus a same-origin-or-not referrer already answer
+ *   the only question this log exists for: "what should I redirect?". The
+ *   referrer itself is reduced to origin + pathname before it is kept, so a
+ *   query string carrying a search term, a token or a session id never
+ *   reaches this table either.
+ */
+export declare const NOT_FOUND_LOG_TABLE = "cogenta_not_found_log";
+/** Distinct paths tracked before new ones stop being recorded, absent an explicit choice. */
+export declare const DEFAULT_MAX_TRACKED_PATHS = 2000;
+export interface NotFoundLogEntry {
+    readonly path: string;
+    readonly hits: number;
+    /** Epoch milliseconds. */
+    readonly firstSeen: number;
+    /** Epoch milliseconds. */
+    readonly lastSeen: number;
+    /** Origin + pathname only — never a query string or a fragment. Null when the request carried none, or an unparsable one. */
+    readonly lastReferrer: string | null;
+}
+export interface RecordNotFoundInput {
+    readonly path: string;
+    readonly referrer?: string | null;
+}
+export interface ListNotFoundOptions {
+    /** Highest hit count first. Defaults to 100. */
+    readonly limit?: number;
+}
+export interface NotFoundLogStore {
+    /** Creates the table if it is missing. Called for you by every other method. */
+    ensureTable(): Promise<void>;
+    /**
+     * Aggregates one public 404 by path.
+     *
+     * Always a no-op rather than a throw when the path is unusably long or the
+     * log is already at its cap — a visitor requesting a broken link must never
+     * see a 500 because this bookkeeping table is full.
+     */
+    record(input: RecordNotFoundInput): Promise<void>;
+    /** Sorted by `hits` descending, then by most recently seen. */
+    list(options?: ListNotFoundOptions): Promise<readonly NotFoundLogEntry[]>;
+    /** Drops one tracked path — used once a redirect has been created from it, or by an editor clearing noise. */
+    remove(path: string): Promise<boolean>;
+    /** Drops every path not requested in more than `retainDays` days. Returns how many were dropped. */
+    purge(retainDays: number): Promise<number>;
+}
+export interface NotFoundLogStoreOptions {
+    readonly db: DatabaseHandle;
+    /** Injected so the tests do not have to wait for a clock. */
+    readonly now?: () => number;
+    readonly table?: string;
+    /** Hard cap on distinct paths tracked at once. Defaults to `DEFAULT_MAX_TRACKED_PATHS`. */
+    readonly maxPaths?: number;
+}
+export declare function createNotFoundLogStore(options: NotFoundLogStoreOptions): NotFoundLogStore;
+//# sourceMappingURL=not-found-log.d.ts.map

package/dist/routing/not-found-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"not-found-log.d.ts","sourceRoot":"","sources":["../../src/routing/not-found-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAG3E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,eAAO,MAAM,mBAAmB,0BAA0B,CAAA;AAM1D,6FAA6F;AAC7F,eAAO,MAAM,yBAAyB,OAAO,CAAA;AAE7C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,0BAA0B;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,6HAA6H;IAC7H,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,gDAAgD;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,gFAAgF;IAChF,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACjD,+DAA+D;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAA;IACzE,8GAA8G;IAC9G,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC,oGAAoG;IACpG,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CAC3C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAC3B;AAsBD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,gBAAgB,CA0GzF"}

package/dist/routing/not-found-log.js

@@ -0,0 +1,153 @@
+import { identifier, limit, sql } from '@cogenta/core';
+import { normalisePath } from './router.js';
+/**
+ * The log of public URLs that answered a 404 (fiche 12 task 1).
+ *
+ * Half the point of a redirect table is knowing what to put in it, and
+ * without this a CMS only learns of a broken link when a visitor or a client
+ * complains. This is that missing half — but it is written by an anonymous
+ * request, on every path nobody asked for, which makes it the one part of
+ * this fiche that is a real attack surface rather than a convenience:
+ *
+ * - **One row per path, never one per request.** A second 404 at a path
+ *   already tracked increments a counter; it never appends a row. Without
+ *   this, a scanner requesting the same missing URL in a loop alone would
+ *   grow the table without bound.
+ * - **`maxPaths` is a hard cap on distinct paths.** Once it is reached, a
+ *   404 at a genuinely new path is not recorded at all — existing paths keep
+ *   accumulating hits, but the table cannot grow past its cap. A scanner
+ *   that requests thousands of unique URLs a minute (the case one row per
+ *   path alone does not defend against) hits this instead of a full disk.
+ * - **`purge` drops what has not been seen in `retainDays`.** Old noise does
+ *   not sit forever, and it is what frees capacity back up under the cap.
+ * - **No personal data, ever.** Neither an IP address nor a user agent is a
+ *   column here, full or truncated — `AGENTS.md` § Logs forbids storing
+ *   either, and the path plus a same-origin-or-not referrer already answer
+ *   the only question this log exists for: "what should I redirect?". The
+ *   referrer itself is reduced to origin + pathname before it is kept, so a
+ *   query string carrying a search term, a token or a session id never
+ *   reaches this table either.
+ */
+export const NOT_FOUND_LOG_TABLE = 'cogenta_not_found_log';
+/** Kept in step with the `varchar(512)` of the DDL below, the same way `redirects.ts` does. */
+const MAX_PATH_LENGTH = 512;
+const MAX_REFERRER_LENGTH = 512;
+/** Distinct paths tracked before new ones stop being recorded, absent an explicit choice. */
+export const DEFAULT_MAX_TRACKED_PATHS = 2000;
+/** Origin + pathname only, capped in length. `null` for anything that does not parse as an absolute URL, or is empty. */
+function sanitiseReferrer(referrer) {
+    if (referrer === null || referrer === undefined || referrer.length === 0)
+        return null;
+    try {
+        const url = new URL(referrer);
+        const reduced = `${url.origin}${url.pathname}`;
+        return reduced.slice(0, MAX_REFERRER_LENGTH);
+    }
+    catch {
+        return null;
+    }
+}
+export function createNotFoundLogStore(options) {
+    const { db } = options;
+    const now = options.now ?? Date.now;
+    const maxPaths = options.maxPaths ?? DEFAULT_MAX_TRACKED_PATHS;
+    const table = identifier(options.table ?? NOT_FOUND_LOG_TABLE, db.dialect);
+    let ready = false;
+    async function ensureTable() {
+        if (ready)
+            return;
+        await db.query(sql `
+      create table if not exists ${table} (
+        path varchar(512) not null primary key,
+        hits integer not null,
+        first_seen bigint not null,
+        last_seen bigint not null,
+        last_referrer varchar(512)
+      )`);
+        ready = true;
+    }
+    return {
+        ensureTable,
+        record: async (input) => {
+            await ensureTable();
+            const path = normalisePath(input.path);
+            if (path.length > MAX_PATH_LENGTH)
+                return;
+            const referrer = sanitiseReferrer(input.referrer);
+            const at = now();
+            await db.transaction(async (tx) => {
+                const existing = await tx.query(sql `
+            select path from ${table} where path = ${path} limit ${limit(1)}`);
+                if (existing.rows.length === 0) {
+                    // A genuinely new path: enforced against the cap so the table
+                    // cannot grow past it, however many unique URLs a scanner tries.
+                    // Best-effort — see the upsert below for what makes a race here
+                    // safe rather than merely unlikely.
+                    const counted = await tx.query(sql `
+              select count(*) as ${identifier('total', db.dialect)} from ${table}`);
+                    const total = Number(counted.rows[0]?.total ?? 0);
+                    if (total >= maxPaths)
+                        return;
+                }
+                // An upsert, not a plain insert: `{ immediate: true }` only takes a
+                // real write lock on SQLite (`BEGIN IMMEDIATE`) — Postgres and MySQL
+                // both discard the option and run under their default isolation, so
+                // two anonymous requests hitting the same brand-new path at once can
+                // both pass the `existing.rows.length === 0` check above. A plain
+                // `insert` would then have the second one crash on the `path`
+                // primary key — precisely the 500 a 404 log must never cause. `on
+                // conflict do update` / `on duplicate key update` turns that race
+                // into a safe increment instead: whichever request loses the race
+                // still lands as exactly one more hit on one row, never a thrown
+                // duplicate-key error.
+                if (db.dialect === 'mysql') {
+                    await tx.query(sql `
+              insert into ${table} (path, hits, first_seen, last_seen, last_referrer)
+              values (${path}, 1, ${at}, ${at}, ${referrer})
+              on duplicate key update
+                hits = hits + 1, last_seen = ${at}, last_referrer = ${referrer}`);
+                }
+                else {
+                    await tx.query(sql `
+              insert into ${table} (path, hits, first_seen, last_seen, last_referrer)
+              values (${path}, 1, ${at}, ${at}, ${referrer})
+              on conflict (path) do update set
+                hits = hits + 1,
+                last_seen = excluded.last_seen,
+                last_referrer = excluded.last_referrer`);
+                }
+            }, { immediate: true });
+        },
+        list: async (listOptions = {}) => {
+            await ensureTable();
+            const found = await db.query(sql `
+        select path, hits, first_seen, last_seen, last_referrer
+        from ${table}
+        order by hits desc, last_seen desc
+        limit ${limit(listOptions.limit ?? 100)}`);
+            return found.rows.map(toEntry);
+        },
+        remove: async (path) => {
+            await ensureTable();
+            const result = await db.query(sql `
+        delete from ${table} where path = ${normalisePath(path)}`);
+            return result.rowsAffected > 0;
+        },
+        purge: async (retainDays) => {
+            await ensureTable();
+            const cutoff = now() - retainDays * 24 * 60 * 60 * 1000;
+            const result = await db.query(sql `delete from ${table} where last_seen < ${cutoff}`);
+            return result.rowsAffected;
+        },
+    };
+}
+function toEntry(row) {
+    return {
+        path: row.path,
+        hits: Number(row.hits),
+        firstSeen: Number(row.first_seen),
+        lastSeen: Number(row.last_seen),
+        lastReferrer: row.last_referrer,
+    };
+}
+//# sourceMappingURL=not-found-log.js.map

package/dist/routing/not-found-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"not-found-log.js","sourceRoot":"","sources":["../../src/routing/not-found-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAA;AAE1D,+FAA+F;AAC/F,MAAM,eAAe,GAAG,GAAG,CAAA;AAC3B,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAE/B,6FAA6F;AAC7F,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAA;AA2D7C,yHAAyH;AACzH,SAAS,gBAAgB,CAAC,QAAmC;IAC3D,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC7B,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC9C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAA;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IACrE,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAA;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,mBAAmB,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAC1E,IAAI,KAAK,GAAG,KAAK,CAAA;IAEjB,KAAK,UAAU,WAAW;QACxB,IAAI,KAAK;YAAE,OAAM;QAEjB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;mCACa,KAAK;;;;;;QAMhC,CAAC,CAAA;QAEL,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IAED,OAAO;QACL,WAAW;QAEX,MAAM,EAAE,KAAK,EAAE,KAA0B,EAAiB,EAAE;YAC1D,MAAM,WAAW,EAAE,CAAA;YAEnB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YACtC,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;gBAAE,OAAM;YACzC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACjD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAA;YAEhB,MAAM,EAAE,CAAC,WAAW,CAClB,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAmB,GAAG,CAAA;+BAChC,KAAK,iBAAiB,IAAI,UAAU,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;gBAEpE,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC/B,8DAA8D;oBAC9D,iEAAiE;oBACjE,gEAAgE;oBAChE,oCAAoC;oBACpC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAoB,GAAG,CAAA;mCAC9B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,CAAA;oBACvE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAA;oBACjD,IAAI,KAAK,IAAI,QAAQ;wBAAE,OAAM;gBAC/B,CAAC;gBAED,oEAAoE;gBACpE,qEAAqE;gBACrE,oEAAoE;gBACpE,qEAAqE;gBACrE,kEAAkE;gBAClE,8DAA8D;gBAC9D,kEAAkE;gBAClE,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,uBAAuB;gBACvB,IAAI,EAAE,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;oBAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;4BACF,KAAK;wBACT,IAAI,QAAQ,EAAE,KAAK,EAAE,KAAK,QAAQ;;+CAEX,EAAE,qBAAqB,QAAQ,EAAE,CAAC,CAAA;gBACvE,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;4BACF,KAAK;wBACT,IAAI,QAAQ,EAAE,KAAK,EAAE,KAAK,QAAQ;;;;uDAIH,CAAC,CAAA;gBAC9C,CAAC;YACH,CAAC,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAA;QACH,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,WAAW,GAAwB,EAAE,EAAwC,EAAE;YAC1F,MAAM,WAAW,EAAE,CAAA;YAEnB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAiB,GAAG,CAAA;;eAEvC,KAAK;;gBAEJ,KAAK,CAAC,WAAW,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,CAAA;YAE5C,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAChC,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,IAAY,EAAoB,EAAE;YAC/C,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACjB,KAAK,iBAAiB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC5D,OAAO,MAAM,CAAC,YAAY,GAAG,CAAC,CAAA;QAChC,CAAC;QAED,KAAK,EAAE,KAAK,EAAE,UAAkB,EAAmB,EAAE;YACnD,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;YACvD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,sBAAsB,MAAM,EAAE,CAAC,CAAA;YACpF,OAAO,MAAM,CAAC,YAAY,CAAA;QAC5B,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAmB;IAClC,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,YAAY,EAAE,GAAG,CAAC,aAAa;KAChC,CAAA;AACH,CAAC"}

package/dist/routing/redirect-patterns.d.ts

@@ -0,0 +1,61 @@
+import { type DatabaseHandle } from '@cogenta/core';
+/**
+ * Prefix redirects — `/blog/*` to `/actualites/*` — a second, deliberately
+ * simpler table beside `RedirectStore`.
+ *
+ * A prefix rule is **not** a regular expression, on purpose (fiche 12, R9 of
+ * the écarts list: "cela n'expose pas le routage public à une expression
+ * régulière catastrophique fournie par un utilisateur"). Matching is a single
+ * `startsWith`, which cannot backtrack and cannot be made to run slowly by
+ * any input — the property a user-supplied regex in the hot routing path
+ * would give up.
+ *
+ * It is also **not chained or flattened** the way `RedirectStore` is. A
+ * prefix rule is applied at most once per request, by construction: the
+ * caller checks `RedirectStore.resolve` first and only falls back to
+ * `resolve` here when that finds nothing, and this store's own `resolve`
+ * never re-enters itself. That sidesteps the loop/flattening machinery
+ * `redirects.ts` needs entirely, rather than reimplementing it for a second
+ * shape of rule — the "Confort" tier this feature belongs to does not carry
+ * the same weight as the exact-match table's chain-safety guarantees.
+ */
+export declare const REDIRECT_PATTERNS_TABLE = "cogenta_redirect_patterns";
+export type RedirectPatternStatus = 301 | 302;
+export interface RedirectPatternRecord {
+    readonly id: string;
+    /** Always ends with `/`. `/blog/*` is stored and shown as `/blog/`. */
+    readonly fromPrefix: string;
+    readonly toPrefix: string;
+    readonly status: RedirectPatternStatus;
+    /** Epoch milliseconds. */
+    readonly createdAt: number;
+}
+export interface AddRedirectPatternInput {
+    /** `/blog/*` or `/blog/` — the trailing `*` is accepted and stripped. */
+    readonly fromPrefix: string;
+    readonly toPrefix: string;
+    readonly status?: RedirectPatternStatus;
+}
+export interface RedirectPatternResolution {
+    readonly to: string;
+    readonly status: RedirectPatternStatus;
+}
+export interface RedirectPatternStore {
+    ensureTable(): Promise<void>;
+    add(input: AddRedirectPatternInput): Promise<RedirectPatternRecord>;
+    list(): Promise<readonly RedirectPatternRecord[]>;
+    remove(fromPrefix: string): Promise<boolean>;
+    /**
+     * The longest matching prefix rule for `path`, rewritten once. `null` when
+     * no rule's prefix matches.
+     */
+    resolve(path: string): Promise<RedirectPatternResolution | null>;
+}
+export interface RedirectPatternStoreOptions {
+    readonly db: DatabaseHandle;
+    readonly now?: () => number;
+    readonly newId?: () => string;
+    readonly table?: string;
+}
+export declare function createRedirectPatternStore(options: RedirectPatternStoreOptions): RedirectPatternStore;
+//# sourceMappingURL=redirect-patterns.d.ts.map

package/dist/routing/redirect-patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-patterns.d.ts","sourceRoot":"","sources":["../../src/routing/redirect-patterns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAIzF;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,uBAAuB,8BAA8B,CAAA;AAiBlE,MAAM,MAAM,qBAAqB,GAAG,GAAG,GAAG,GAAG,CAAA;AAE7C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;IACtC,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAA;CACxC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,GAAG,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACnE,IAAI,IAAI,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAA;IACjD,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5C;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAA;CACjE;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AA2BD,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,oBAAoB,CAyItB"}

package/dist/routing/redirect-patterns.js

@@ -0,0 +1,173 @@
+import { CogentaError, identifier, limit, sql } from '@cogenta/core';
+import { newId } from '../id.js';
+import { normalisePath } from './router.js';
+/**
+ * Prefix redirects — `/blog/*` to `/actualites/*` — a second, deliberately
+ * simpler table beside `RedirectStore`.
+ *
+ * A prefix rule is **not** a regular expression, on purpose (fiche 12, R9 of
+ * the écarts list: "cela n'expose pas le routage public à une expression
+ * régulière catastrophique fournie par un utilisateur"). Matching is a single
+ * `startsWith`, which cannot backtrack and cannot be made to run slowly by
+ * any input — the property a user-supplied regex in the hot routing path
+ * would give up.
+ *
+ * It is also **not chained or flattened** the way `RedirectStore` is. A
+ * prefix rule is applied at most once per request, by construction: the
+ * caller checks `RedirectStore.resolve` first and only falls back to
+ * `resolve` here when that finds nothing, and this store's own `resolve`
+ * never re-enters itself. That sidesteps the loop/flattening machinery
+ * `redirects.ts` needs entirely, rather than reimplementing it for a second
+ * shape of rule — the "Confort" tier this feature belongs to does not carry
+ * the same weight as the exact-match table's chain-safety guarantees.
+ */
+export const REDIRECT_PATTERNS_TABLE = 'cogenta_redirect_patterns';
+/** Same bound as `RedirectStore`, and for the same reason: kept in step with the DDL below. */
+const MAX_PATH_LENGTH = 512;
+/**
+ * Hard cap on distinct prefix rules.
+ *
+ * `resolve` below scans every rule to find the longest matching prefix — the
+ * only portable way to do "most specific prefix wins" across three SQL
+ * dialects without a second `LIKE`-based index scheme for a feature this
+ * small. That scan runs on every public request that reaches it, so the
+ * table this cap bounds is deliberately a short, curated list of URL-structure
+ * migrations, never an import target the way the exact-match table is.
+ */
+const MAX_PATTERNS = 200;
+/** `/blog/*` and `/blog` both mean the same directory prefix `/blog/`. */
+function normalisePrefix(raw, field) {
+    const withoutWildcard = raw.endsWith('*') ? raw.slice(0, -1) : raw;
+    const normalised = normalisePath(withoutWildcard);
+    if (normalised.length > MAX_PATH_LENGTH) {
+        throw new CogentaError({
+            code: 'CONTENT_ROUTE_INVALID',
+            message: `A redirect prefix may be ${MAX_PATH_LENGTH} characters at most.`,
+            hint: 'Shorten the prefix.',
+            details: { field, length: normalised.length },
+        });
+    }
+    return normalised === '/' ? '/' : `${normalised}/`;
+}
+export function createRedirectPatternStore(options) {
+    const { db } = options;
+    const now = options.now ?? Date.now;
+    const nextId = options.newId ?? newId;
+    const table = identifier(options.table ?? REDIRECT_PATTERNS_TABLE, db.dialect);
+    let ready = false;
+    async function ensureTable() {
+        if (ready)
+            return;
+        await db.query(sql `
+      create table if not exists ${table} (
+        id varchar(64) not null primary key,
+        from_prefix varchar(512) not null,
+        to_prefix varchar(512) not null,
+        status integer not null,
+        created_at bigint not null
+      )`);
+        await db
+            .query(sql `create unique index ${identifier(`${options.table ?? REDIRECT_PATTERNS_TABLE}_from`, db.dialect)}
+            on ${table} (from_prefix)`)
+            .catch(() => undefined);
+        ready = true;
+    }
+    return {
+        ensureTable,
+        add: async (input) => {
+            await ensureTable();
+            const fromPrefix = normalisePrefix(input.fromPrefix, 'fromPrefix');
+            const toPrefix = normalisePrefix(input.toPrefix, 'toPrefix');
+            const status = input.status ?? 301;
+            if (fromPrefix === toPrefix) {
+                throw new CogentaError({
+                    code: 'CONTENT_REDIRECT_LOOP',
+                    message: `${fromPrefix}* cannot redirect to itself.`,
+                    hint: 'Nothing needs a redirect here: the prefix did not change.',
+                    details: { fromPrefix },
+                });
+            }
+            const existing = await db.query(sql `
+        select from_prefix from ${table} where from_prefix = ${fromPrefix} limit ${limit(1)}`);
+            if (existing.rows.length === 0) {
+                const counted = await db.query(sql `
+          select count(*) as ${identifier('total', db.dialect)} from ${table}`);
+                if (Number(counted.rows[0]?.total ?? 0) >= MAX_PATTERNS) {
+                    throw new CogentaError({
+                        code: 'CONTENT_ROUTE_INVALID',
+                        message: `No more than ${MAX_PATTERNS} prefix redirects are supported.`,
+                        hint: 'Remove an existing pattern before adding a new one, or use an exact redirect instead.',
+                        details: { limit: MAX_PATTERNS },
+                    });
+                }
+            }
+            const record = {
+                id: nextId(),
+                fromPrefix,
+                toPrefix,
+                status,
+                createdAt: now(),
+            };
+            // Delete-then-insert, same reasoning as `RedirectStore.add`: one
+            // behaviour across three dialects that each spell "replace" differently.
+            await db.transaction(async (tx) => {
+                await tx.query(sql `delete from ${table} where from_prefix = ${fromPrefix}`);
+                await tx.query(sql `
+            insert into ${table} (id, from_prefix, to_prefix, status, created_at)
+            values (${record.id}, ${record.fromPrefix}, ${record.toPrefix}, ${record.status}, ${record.createdAt})`);
+            }, { immediate: true });
+            return record;
+        },
+        list: async () => {
+            await ensureTable();
+            const found = await db.query(sql `
+        select id, from_prefix, to_prefix, status, created_at
+        from ${table}
+        order by created_at desc`);
+            return found.rows.map(toRecord);
+        },
+        remove: async (fromPrefix) => {
+            await ensureTable();
+            const result = await db.query(sql `
+        delete from ${table} where from_prefix = ${normalisePrefix(fromPrefix, 'fromPrefix')}`);
+            return result.rowsAffected > 0;
+        },
+        resolve: async (path) => {
+            await ensureTable();
+            const target = normalisePath(path);
+            const rules = await db.query(sql `
+        select from_prefix, to_prefix, status from ${table}`);
+            // Longest prefix wins — the most specific rule beats a broader one
+            // rather than whichever happened to be inserted first.
+            let best = null;
+            for (const rule of rules.rows) {
+                const matches = target === rule.from_prefix.slice(0, -1) || target.startsWith(rule.from_prefix);
+                if (!matches)
+                    continue;
+                if (best === null || rule.from_prefix.length > best.fromPrefix.length) {
+                    best = {
+                        fromPrefix: rule.from_prefix,
+                        toPrefix: rule.to_prefix,
+                        status: Number(rule.status),
+                    };
+                }
+            }
+            if (best === null)
+                return null;
+            const rest = target === best.fromPrefix.slice(0, -1) ? '' : target.slice(best.fromPrefix.length);
+            const to = `${best.toPrefix}${rest}`.replace(/\/+$/u, '') || '/';
+            const status = best.status === 302 ? 302 : 301;
+            return { to, status };
+        },
+    };
+}
+function toRecord(row) {
+    return {
+        id: row.id,
+        fromPrefix: row.from_prefix,
+        toPrefix: row.to_prefix,
+        status: Number(row.status) === 302 ? 302 : 301,
+        createdAt: Number(row.created_at),
+    };
+}
+//# sourceMappingURL=redirect-patterns.js.map

package/dist/routing/redirect-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-patterns.js","sourceRoot":"","sources":["../../src/routing/redirect-patterns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,2BAA2B,CAAA;AAElE,+FAA+F;AAC/F,MAAM,eAAe,GAAG,GAAG,CAAA;AAE3B;;;;;;;;;GASG;AACH,MAAM,YAAY,GAAG,GAAG,CAAA;AAqDxB,0EAA0E;AAC1E,SAAS,eAAe,CAAC,GAAW,EAAE,KAAgC;IACpE,MAAM,eAAe,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAClE,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,CAAC,CAAA;IAEjD,IAAI,UAAU,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACxC,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,4BAA4B,eAAe,sBAAsB;YAC1E,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SAC9C,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAoC;IAEpC,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAA;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAA;IACrC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI,uBAAuB,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAC9E,IAAI,KAAK,GAAG,KAAK,CAAA;IAEjB,KAAK,UAAU,WAAW;QACxB,IAAI,KAAK;YAAE,OAAM;QAEjB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;mCACa,KAAK;;;;;;QAMhC,CAAC,CAAA;QAEL,MAAM,EAAE;aACL,KAAK,CACJ,GAAG,CAAA,uBAAuB,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,uBAAuB,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC;iBAC3F,KAAK,gBAAgB,CAC/B;aACA,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAEzB,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IAED,OAAO;QACL,WAAW;QAEX,GAAG,EAAE,KAAK,EAAE,KAA8B,EAAkC,EAAE;YAC5E,MAAM,WAAW,EAAE,CAAA;YAEnB,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;YAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;YAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,CAAA;YAElC,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,GAAG,UAAU,8BAA8B;oBACpD,IAAI,EAAE,2DAA2D;oBACjE,OAAO,EAAE,EAAE,UAAU,EAAE;iBACxB,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAA0B,GAAG,CAAA;kCAChC,KAAK,wBAAwB,UAAU,UAAU,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACxF,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAoB,GAAG,CAAA;+BAC9B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,EAAE,CAAC,CAAA;gBACvE,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;oBACxD,MAAM,IAAI,YAAY,CAAC;wBACrB,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EAAE,gBAAgB,YAAY,kCAAkC;wBACvE,IAAI,EAAE,uFAAuF;wBAC7F,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;qBACjC,CAAC,CAAA;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAA0B;gBACpC,EAAE,EAAE,MAAM,EAAE;gBACZ,UAAU;gBACV,QAAQ;gBACR,MAAM;gBACN,SAAS,EAAE,GAAG,EAAE;aACjB,CAAA;YAED,iEAAiE;YACjE,yEAAyE;YACzE,MAAM,EAAE,CAAC,WAAW,CAClB,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,wBAAwB,UAAU,EAAE,CAAC,CAAA;gBAC3E,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;0BACF,KAAK;sBACT,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,SAAS,GAAG,CAAC,CAAA;YAC5G,CAAC,EACD,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAA;YAED,OAAO,MAAM,CAAA;QACf,CAAC;QAED,IAAI,EAAE,KAAK,IAA+C,EAAE;YAC1D,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAqB,GAAG,CAAA;;eAE3C,KAAK;iCACa,CAAC,CAAA;YAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QACjC,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,UAAkB,EAAoB,EAAE;YACrD,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACjB,KAAK,wBAAwB,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC,CAAA;YACzF,OAAO,MAAM,CAAC,YAAY,GAAG,CAAC,CAAA;QAChC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAY,EAA6C,EAAE;YACzE,MAAM,WAAW,EAAE,CAAA;YACnB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YAElC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAqB,GAAG,CAAA;qDACL,KAAK,EAAE,CAAC,CAAA;YAEvD,mEAAmE;YACnE,uDAAuD;YACvD,IAAI,IAAI,GAIG,IAAI,CAAA;YACf,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,OAAO,GACX,MAAM,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;gBACjF,IAAI,CAAC,OAAO;oBAAE,SAAQ;gBACtB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;oBACtE,IAAI,GAAG;wBACL,UAAU,EAAE,IAAI,CAAC,WAAW;wBAC5B,QAAQ,EAAE,IAAI,CAAC,SAAS;wBACxB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;qBAC5B,CAAA;gBACH,CAAC;YACH,CAAC;YACD,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAA;YAE9B,MAAM,IAAI,GACR,MAAM,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACrF,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAA;YAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAA;YAC9C,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAA;QACvB,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAuB;IACvC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAC9C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;KAClC,CAAA;AACH,CAAC"}

package/dist/routing/redirects.d.ts

@@ -13,10 +13,24 @@ import { type DatabaseHandle } from '@cogenta/core';
  *   is rejected at write time, where there is still a human to tell.
  */
 export declare const REDIRECTS_TABLE = "cogenta_redirects";
-export declare const REDIRECT_REASONS: readonly ['slug-change', 'manual', 'import'];
+/**
+ * `'agent'` (L22 task 3) marks a redirect an agent created itself —
+ * `redirects.create` (`@cogenta/agents`) always writes this reason, never
+ * `'manual'`, so an admin looking at `/seo?tab=redirects` can tell which
+ * rows a human typed and which one a monitoring agent proposed and had
+ * applied under `autopilot` autonomy. Additive to a stored, open list (not a
+ * versioned contract enum): `toRecord` below already falls back to
+ * `'manual'` for any string it does not recognise, so a row written by an
+ * older build still reads back fine.
+ */
+export declare const REDIRECT_REASONS: readonly ['slug-change', 'manual', 'import', 'agent'];
 export type RedirectReason = (typeof REDIRECT_REASONS)[number];
-/** 308 and 307 are deliberately absent: a moved page is a GET, and 301 is what search engines act on. */
-export type RedirectStatus = 301 | 302;
+/**
+ * 301/308 are permanent (cacheable); 302/307 are temporary (never cached);
+ * 410 is not a redirect at all — it tells a visitor and a crawler the page is
+ * gone for good, which is honester than sending them to the home page.
+ */
+export type RedirectStatus = 301 | 302 | 307 | 308 | 410;
 export interface RedirectRecord {
     readonly id: string;
     readonly from: string;
@@ -31,19 +45,26 @@ export interface RedirectRecord {
 }
 export interface AddRedirectInput {
     readonly from: string;
-    readonly to: string;
+    /** Required unless `status` is 410 — a Gone rule has nothing to point at. */
+    readonly to?: string;
     readonly status?: RedirectStatus;
     readonly collection?: string;
     readonly entryId?: string;
     readonly locale?: string;
     readonly reason?: RedirectReason;
 }
+/** A PATCH: only `to` and/or `status` may change. Everything else about a rule is set once, at `add()`. */
+export interface UpdateRedirectInput {
+    readonly to?: string;
+    readonly status?: RedirectStatus;
+}
 export interface ListRedirectsOptions {
     readonly limit?: number;
     readonly collection?: string;
     readonly locale?: string;
 }
 export interface RedirectResolution {
+    /** For a 410, this is `from` itself — there is no destination, and the caller must not send a `Location` header. */
     readonly to: string;
     readonly status: RedirectStatus;
 }
@@ -51,6 +72,8 @@ export interface RedirectStore {
     /** Creates the table if it is missing. Called for you by every other method. */
     ensureTable(): Promise<void>;
     add(input: AddRedirectInput): Promise<RedirectRecord>;
+    /** Changes `to` and/or `status` of an existing rule in place — no gap where the old URL 404s. */
+    update(from: string, input: UpdateRedirectInput): Promise<RedirectRecord>;
     /** The final destination of a path, following any chain left by an import. */
     resolve(path: string): Promise<RedirectResolution | null>;
     list(options?: ListRedirectsOptions): Promise<RedirectRecord[]>;

package/dist/routing/redirects.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redirects.d.ts","sourceRoot":"","sources":["../../src/routing/redirects.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,eAAe,CAAA;AAItB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,eAAe,sBAAsB,CAAA;AAoBlD,eAAO,MAAM,gBAAgB,YAAI,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAE5E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D,yGAAyG;AACzG,MAAM,MAAM,cAAc,GAAG,GAAG,GAAG,GAAG,CAAA;AAEtC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACrD,8EAA8E;IAC9E,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACzD,IAAI,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAcD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAgOhF"}
+{"version":3,"file":"redirects.d.ts","sourceRoot":"","sources":["../../src/routing/redirects.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,cAAc,EAKpB,MAAM,eAAe,CAAA;AAItB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,eAAe,sBAAsB,CAAA;AAoBlD;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,YAAI,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAA;AAErF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9D;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;AAcxD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;IAC/B,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CACjC;AAED,2GAA2G;AAC3G,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,oHAAoH;IACpH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAA;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,gFAAgF;IAChF,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,GAAG,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACrD,iGAAiG;IACjG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;IACzE,8EAA8E;IAC9E,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAA;IACzD,IAAI,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;IAC/D,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtC;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAA;IAC3B,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAcD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAqUhF"}